Just installed afresh copy of the software
ran the rootkit scan
it found root kits
if i try to delete ANY file its found
I get the following error:
Attachment 12326
any idea splease as really need to get this cleaned up?
Just installed afresh copy of the software
ran the rootkit scan
it found root kits
if i try to delete ANY file its found
I get the following error:
Attachment 12326
any idea splease as really need to get this cleaned up?
Hello eastwoodjon, :welcome:
Did you elevate permissions in Spybot?
http://forums.spybot.info/showthread.php?55946-How-can-I-get-administrator-rights
Could you provide the log showing the items flagged please.Quote:
Originally Posted by eastwoodjon
In general all items flagged by the RootAlyzer are not necessarily malicious but show files it believes to be out of the ordinary and may give a hint for an infection.
Even legitimate software may use rootkit technologies.
Best regards.
its running as admin and still same issue
sample file found
aboutus.html.asp
winners.htmlsp
zincyr.a
aspnet_clientasp
\zinc\www.udxpress.com-id-url.txtd-url.txtm-id-url.txt
\error.loguel.asp
\zinc
\zinc\www.udxpress.com-id-url.txtd-url.txtm-id-url.txt
Hi eastwoodjon,
Could you produce the log as shown in other topics in this forum please.
Examples:
https://forums.spybot.info/showthrea...ystem-malwares
https://forums.spybot.info/showthrea...-Are-these-bad
Best regards.
// info: Rootkit removal help file
// copyright: (c) 2008-2015 Safer-Networking Ltd. All rights reserved.
:: RootAlyzer Results
File:"Invisible to Win32","D:\aboutus.html.asp"
lots of .asp file and lots of .txt file all like above
the issue is not the files as the software finds them it just wont delete them
Hello eastwoodjon,
I think it would be best if someone takes a look at the system to see if there is a problem. :)
First see that forum's FAQ which also includes instructions in post #2 on how to provide the logs from Farbar Recovery Scan Tool and aswMBR, which are the logs used in the preliminary analysis.
http://forums.spybot.info/showthread.php?t=288
Best regards.